#digital-forensics

#digital-forensics

Memory forensics is the acquisition and analysis of a system's random access memory (RAM). It provides visibility into transient information that is otherwise absent from persistent storage. This includes kernel structures, process execution trees, loaded DLLs, active network sockets, in-memory registry hives, and injected code segments. Over the years, memory forensics has become a major plank of cybersecurity research, becoming crucial for functions such as discovering stealthy malware like or other sophisticated cyber attacks.

Details have emerged of a troubling case in which a basic engineering mistake wrecked a digital evidence investigation and led to wrongful accusations. An open judgment [PDF] published by the UK's Investigatory Powers Tribunal, which is responsible for investigating claims of British authorities illegally abusing their powers during the course of an investigation, detailed the impact on three people wrongly accused of child sex offences.

Technical experts are focusing on messages from around the time the boy disappeared

Captain Samuel White approved a search of Bartels' gear, leading to revelations of illegal activities including possession of CSAM and buying it while stationed at Guantanamo.

The discussions must be grounded in real-world cyber risk scenarios if we're to future-proof UK critical infrastructure.